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(57) Abstract: The present invention is directed to providing systems and methods for remotely monitoring sites to provide real 
time information which can readily permit false alarms to be distinguished, and which can identify and track the precise location 
of an alarm. In exemplary embodiments, monitoring capabilities such as intrusion/fire detection and tracking capabilities, can be 

^ implemented through the use of multistate indicators in a novel interface which permits information to be transmitted using standard 
network protocols (IP) from a remote site to a monitoring station in real-time over preexisting communication networks, such as the 
Internet (304). A wireless network (302) can also be established using browser encapsulated communication programs to transir it 
data packets which comply with any standard wireless local area network protocol (306). Communications can thereby be established 

^ between a web server (420) embedded in a centrally located host monitoring station (202) and a separate security panel (206). 
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METHOD AND APPARATUS FOR REMOTELY 
MONITORING A SITE 

BACKGROUND OF THE INVENTION 

Field of The Invention: 

The present invention relates generally to monitoring a remote site. 
More particularly, the present invention is directed to monitoring a remote 
site by providing real time transmission of outputs from a plurality of 
digital and/or analog multistate sensors which detect intrusion and/or fire, 
and communicate this information in an efficient, and effective format. 
Background Information: 

Existing intrusion detection systems and their respective monitoring 
stations typically provide binary off/on alert information to the user. 
Known security systems employ binary status detection devices due to the 
availability and low cost of these sensors, and report only active (versus 
inactive) alarm status information. For example, an indicator, such as a 
lamp or audible output, is on when a particular sensor is tripped, and is off 
when the sensor is reset. Some known methods capture dynamic point 
state transitions using, for example, latching sensors that hold a transition 
state for a limited period of time, then reset automatically. 

Systems that offer more detailed information resort to specialized 
communication protocols and proprietary interconnection solutions. For 
example, monitoring systems for property protection and surveillance are 
known which transmit live audio and/or video data. However, because a 
large number of video surveillance cameras is not only cost prohibitive, 
but generates large quantities of data that cannot be easily transmitted to 
remote monitoring sites in real time, these systems have not achieved the 
wide spread use associated with binary off/on systems. 
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Systems that supply binary off/on alert information, even 
sophisticated systems that employ multiple sensors in a monitored space, 
only resolve alert information to a particular sector, or zone, of the 
. • building under surveillance. Thus, information such as the precise locanon 
■ of a potential intruder; is not provided for responding police officers. 
. More importantly, even when alarge number of sensors isused to mcrease 
the resolution of alert information, the use of binary' on/off indicators 
prohibits any ability to track an intruder's movement through the bmldmg 
. and yet still be able to resolve the current location^ the intruder. 

In addition, known binary off/on systems can not distmgmsh 
. . aether an alarm is real (i.e., genuine) o* false, When-police arrive on the 
''J : scene of. building where m ^W*^.«^.^.^^ 
' ,he alarm-is realor fals^and they are. blmdt^^is: inside' the burldmg. 

Substantialr^andw^ t0 ^ 

. .: Z^siom^^^^ ^r^^^vaiid, the 
'■rul ^police d a.^toow.^for. anSWfce f^W«W**. They 
J r -,, enter thdbuilding *bt lowing wtidre-ifie ^bjea(S)-irfigllt1>e,; ; 
^; W sam*dr^^ 

/ . ' , ifire company , the false/real alarm ° f fe ' 

. - -and the movement of the fire are unknown to the firecompany which 

; receives and responds to the alarm. ■<■.■■■•'■ . 

... Accordingly. . it wculd be desirable to ptovide.a system and meftod 

'., for.monitOring a remote site, whereby the Mse/real alarms can be 
. accnrate.y distinguished, and thereby, movement of intruders or fire can be 
reiiably tracked while still pinpointing the precise location Of the intruder 
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or fire. It would. also be desirable to provide this information to 
monitoring sites, for use by responding personnel, in real time. 

SUMMARY OF THE INVENTION 
The present invention is directed to providihgi systems and methods 
5 for remotely monitoring sites to provide real; time information which can 

: readily permit false, alarms to be distinguished, and which can -identify and 
track the precise location of an alarm. In exemplary embodiments, 
monitoring capabilities such as intrusion/fire detection and* tracking 
capabilities, , can be amplemented through the use, of multistate indicators in 
10 : , -a r novel;. interface which permits information to be itransmitted using 

; -standard network: protocols from a remote site to a monitoring station in ■ 
v , - ..... real -time i^veir preexisting; commtinication networks, such as the Internet. 
. ; r , ; : o A iwir^.ess ^ 
■ xi LCQnui^ 

15 ^dv.h s<? forth) { to 45an§miti data p^ketsuwhich ^om^y^ wdtK any standard wireless 

.1. . -local ijae^nefy^ r 
betWje§n : 3 .web* ise^M^ §q$Jb#dded io; ia .centrally iocatted; hoist monitoring 
< . - ■ j t : i s.taftion and , a 5qt>araj^:^ecurity* p&nel deptoyedj in loachidf the buildings to be 
: / | j r ; remotely monitored . * in^xenaplary : enibodim^svictoinmunirations can be 
20 , handed, Qff^fr^ 

, ; monitoring^tatiop (fqr example.* : to. a; laptop computer in a responding 
vehicle, such as a police or fire ^vehicle). The handoff can be such that 
- j; . * direct communications are established between; at security panel located at a 
■--site being monitojed'and the laptop (for example, over a cellular network), 
25 , - or indirect communications can be established :via the host monitoring 

station.. • \ r *: 
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The network can be used to provide the primary visual alarm status 
reporting that gives the monitoring authority (user) the ability to identity 
the precise location of an intrusion/fire, and to distinguish false alarms. 
Multiple state, or. multistats indications are provided to represent a sensor. 
For example, eachsensor can be identified as being: (1) currently in 
alarm; (2) currently in.alarm and acknowledged by a monitor; (3) recently 
in alarm; (4) not in alarm; (5) disabled; or. (6) a hon.reporting alarm. With 
these multistate indications, the movements of an intruder or fire can be 
tracked, and yet the precise location of the intruder/fire can still be 
, identified. This; additional tracking ability Jgives police/firemen a tactical 
advantage at the scene as they know the location of the ■subject/fire and can 
track any subsequent movements as they iclose to make the arrest and or 

fight . the •fir-s.ri).:.;' -i.-. nv--'.v:. ? ?n: •■■ -.i^^-r^ " ,! - 

Gerierally^eaidttg^ present ;v*<- 

: invention are. directedito: a method^ a space;. 

the apparatus comprising: a security; panel -locaied^at the^space, said -.-a 

security^ane^aving^plurality sensors; and a^monitoring system for 

receiving realise: in Wation^ 

cover a netwoirk .using a network! protocol! . said monitoring system . - 
including a graphic interface to display said information as multistate .Z 
outputs associated with each of said plurality of sensors, ' .-'/-.' 1 

In accordance with alternate embodiments, an apparatus is provided 
for monitoring a space comprising: a security panel located at the space; 
and a monitoring system for receiving real time information regarding the 
space fromithe security panel over a network, said monitoring system 
including a graphic interface to display information that distinguishes false 
alarms from actual alarms. 
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Exemplary embodiments provide updated information, in real time, 
regarding the status of sensors associated with point alarms included in ; the 
space being monitored. The graphical display of information can be 
provided as a hierarchical representation of network-to-site-to-point status 
using a plurality of tiered screen displays. The supervisory monitoring - 
system can be configured as a central! or distributed monitoring system - ! 
including, but not limited to, the use of a base station host computer which 
can optionally direct information to the user via a . cellular telephone .*- = l 
network and/or via paging service in real-time. Alternate -embodiments r 
can also include security measures, such as the pseudo-randomizing of port 
access to the network to secure command and>control communications. . * ~ 
. BRIEF; DESCRIPTION OF THE DRAWINGS / 

Other objects and advantages of the present invention wiJi become! 
more apparent to, those rskilted-itt;the^^ 

description of -the <pref^ed em^odm have been 

designated by ilike^numexals; and whpreim?'j;^ r; .^lUrvncoo ^i^.:^;; - i: 

».;■ '* 1 ; ; Figure il shows; an -exemplarje graphics s<&een<jysewddi through -a 
I security, paneb web page ^wherbin'ther graphics, display i contains a floorplan 
layout, with special icons o:verlaid.on a bjtihap toiidentiifyjsen3©ii points and 
their status!;- ..t > * -.o'/vir'o; :! v^iv^L .«■*.' . j-.:rj. *. AAq*\:u, ;■ 

Figure 2 shows a general .overview of communications transpired 
between if our basic subsystems;, , j;- u :^ .u** -...>■ J ; , . 

Figure 3. show; basic components of an exemplary system block 
diagram;.. T ■- • - ./;. . ?\ ( , * -w - Vi y . • „ . 

Figure 4 shows a;detailed diagram of an exemplary hostfcomputer 
in a supervisory monitoring system; v . ;!•.; : . , 
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Figure 5 shows a detailed diagram of an exemplary remote 
computer; 

Figure 6 shows a detailed diagram of an exemplary security panel; 
Figure 7 'shows a detailed diagram of an exemplary mobile 

5 computer; ' * ~ " ". 

- Figure 8 shows ari exemplary display screen; ; 
- - Figure 9 shows exemplary communications between the security 

panel arid the host computer; ; ' 
" * * Figure lO showis exemplary communications between the host 

10 r computer and the remote* computer; 

Figure 11 shows exemplary communications between the security 

panel arid ; the remote computer; : ^id ] ' • 
- figure 12 shows^exenp^ 

' ; pariel and thcf mobile 5 ' coniputfe^^^ — i£; ^ * - Li - - il 1 

:; H^plary^bd^ 
m> i pfovideci using one e&m^lary display of information that is provided at 

2.0 ?n : -a supervisory monitor mg^sy Stem's graphical use* interface in accordance 

^ <• With the present invention/ Referring to Figure l, v th'e graphical user 
t: — interface provides a screen display 100 of ; a particular floor plan 102 in a 

building being monitored for intrusion and/or fire detection. In the Figure 
; ; 1 example, a web browser included in the supervisory monitoring system 
25 is displaying a building floor plan 102 for an elementary school with its 

1 alarm points, and illustrates a two-person intrusion in progress. In this 
black/white rendition, points not in alarm are white circles 104. Two 
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. black circles 106, 108 indicate two points that are in simultaneous alarm. 
The gray filled circles 110, 112, 114 and 116 show alarms in a latched 
condition; that is, they, were recently in alarm but, are not now in alarm. 
Thus, at least three, different states (for example, not in alarm; 
5 recently in alarm; and in alarm) are associated with the sensor located at 

each alarm point jn.the Figure 1 floqrplan to provide a multistate indication 
for each alarm point at ,the ; user interface. - Of course, those skilled in the 
art will appreciate that any number of states can be, provided, such as 
additional states to represent inoperable .or disabled alarm points. For 
10 example, as will be described with respect to, an exemplary embodiment, 

;.. . r six such .states can be used. ; ^ r ,. •.; , .. ? w;: 

The user can apply pattern4iscr^ 
/ \;S e Pr?senl£t^ display at a 

moment in time, referenced herei^as^n "e^^^ic^r^jtQ precisely 

15 ■ <^ 

display of alarm states, false alarms, C3^ 
. : .jgenuinq alarms (thaUs v act\^^^ ^^^Sff^^^^f 01 " exam P le * a 

" ;., r , mouse cursor associated w^b.the supervisory, m^^ 

. f : . t graphical, user .internee, can be.positipi^d^xt to.a pa^ticiil^r .alarm point 
20 - ' icon XQ.access additional alarrp point informatiop . TJftjs ,alarrn point 

j information ,can. identify the typje,of seiasQ^situatjed at the alarm point (for 
, .example, glass breakage detector,, smoke detector, and .so forth) and the 

; : room number or area can, be identified. ( , ( j . ; : 
, T . . ( .. The Figure 1, event slice asspciat^d with activity in the space being 
25 , monitored (that is, a snapshot in time of a .condition monitored at the 

graphical user interface), can be interpreted in the following manner: 
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a) The latch condition 110 represents a door sensor that has 
' recently been in alarm and is now out of alarm; 

- < ' b) ; The latch condition 1 12 represents a motion detector that 
was recently in alarm and is now out of alarm; 
5 ^ c) The latch conditions 114 and 116 represent motion detectors 

• in the same state as latch condition 112; these conditions 

■ f inform the user of two separate tracks (i.e., paths) of an 
* j - ^intruder (or spread of a fire) ; - - ' ' 

d) The two points 106, 108 are in simultaneous- alarm. By 
10 positioning the mouse cursor at each of these points, the 

■ i ^ ■'*"■•' : user can determine that these points are, for example, 

motion detectors in Rooms 1 3 and 19 of the school, 
c i .,.:•..«<. yA'-'.i'::. ii, . respectively? - iy*fc-y! *r:- '.* : /. i J. 

An analysis summary can be 'displayed' to indicate that an intrusion 
15 occurred at the front Uoor-'at& afreet least two intruders, one 

going left up the-' North : iiair and the other 'going right down the East hall. 
The display indicates that tli£ iht^^ in Rooms 3 and 19. 

; r-<-jv * A n ^GTIVJTY icoW 1 1 8 r cah b*6 selfectea tb review details of all time event 
■- r n/>: "data for eacli aMrmipoint including, for example; the" exact times for the 
20 t u: f break-in ^ by the user and/or law 

■ ^ * '■ --"enforcement/- ''' J ^ .' r - - : jn ■ , " - 

' - Real-time updates to the f Figure 1 display can be continuously 

- received by the 'supervisory monitoring system" over a communication 
• : network, such as an- Internet/Ethernet communication network, for the 
25 purpose of subsequent tracking. The supervisory monitoring system can 

include a host computer, configured with' an embedded web server, that 
acts as the principal monitoring station for any ^number of security/fire 
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, - alarm panels equipped with .embedded web servers and located in one or 
more distinct spaces being monitored. Remote browsers, fixed and 
mobile, can also be linked into the .system from [authorized police, fire, and 
private security departments.. ,:\ ,. ; . v 
5 , . , . Intrusion detection, tracking, and subjectiocation are accomplished 

in accordance >vith. exemplary embodiments of the present invention using 
known sensor technologies in conjunction, with a novel notification process. 
For example, the alarm point state conditions can be categorized into six 
fundamentally different states: , t ^ 

10 ..-J t ; ; (1), , A point curreiitlyan: an alarm state; 

>. r-: , .-(2) . i A point currently in-an alarm state, and acknowledged by a m 

(3) A point recently in an alarm, state-, but unacknowledged as a ? 

• ■•■./"• ;t>;i; -Jhoietfi tcyrjreiit} alarms v^rcu^uc ^ns 

1 5 . ;^-v.i imi (4); ; iRoiig oot^^j^am^tate^r, ^ <mt b ; - '\:r^ ^ 

1 1 c r; ; s a ; ; ! ; ' ^ (5 ) ; 1 1\ : i r A fpojLntt that t$4t§ kf^nj fiS$<*W£^ »L n u ■ to I .? < i ; » / 'j ' - 

-tr ri:- ! f ii ?: ; Th,e .lasfc tvyp ^te^ f jijsalHedr.aincl! nqn.->r^portipgi (pr, fail)^ represent 
: inoperable pp^ 

20 / r provide the monitoring, operator ?,cjea? indication qf which points are 

actively set into alarm, their simultaneity (multiplej^ints o^ntrusion), and 
:: C i which alarms h^ve^been repently in a state of alarm but:which are not 
^currently in alarm. . Each of , the point conditions is. represented on the 
• screen display by a unique icon,, combining shape and color, for easy 
25 7: . : i recognition. ~, : r/.. : - . . ; ... 

. Inoperable point conditions .appear unobtrusive. They, do not 
distract the operator from real-time alarms, but send a clear notification 
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that these points are not contributing to the security monitoring process. 
When a point alarm is acknowledged by the Supervisory monitoring 
station; the icon for mar alarm point can be changed to appear less alerting 
(for example, change from a first color 

(such as, yellow)), allowing the operator to focus on new activity rather 
than the door that had been left open: The non-alarming point icon appears 
clearly visible; but not disturbing in color and shape. An icon that is 
alarming in color and shape represents thealannirig point- 
(unacknowledged). 

- -Whilemc^ 

' th e icons act as ; e'asily discernible symbols wimout cluttering the screen and 

•• •• ^ conftising me'bper&dr. fie racreas^evelW tofortta^-ilisplayed 
• > -'pro^lne^p^r tools 46 ^ecoginze W^esence' WMtipie intruders, 
- SenSOr) 

< ^ fronhwih^ 
atttftdt^ 

* * v orally ^baking 1 , a hierarchies approach dan be used to pinpoint 
' > 'alann cdnditiohs 1 aihong^lufaf ^aces r <fof example, different buildings) 
- --being monitored. For example^ high level display can include a large 
1 « geographical area, and can include 1 ' indications of all facilities being 

monitoredl Where any alarm in a« given facility is tripped; the user can be 
• • notified in the high level display. By moving the cursor to that facility and 
■ clicking, a detailed floorplan such as that shown in Tigure l can be 
provided to the user. ' 
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The supervisory monitoring system can display an indication at the 
monitoring site's web browser within, for. example, .1-4 seconds from the 
, time a sensor located at the space : being monitored is tripped into an alarm 
condition. A mouse click on the icon representing the facility in alarm 
5 . " - directs the system to retrieve, for browser display, a floor plan schematic 

- ( (such as that of Figure 1) from the actual facility/s.sepurity panel computer 
that displays all alarm points included in the facility and their current 
states. Subsequent changes in alarm point conditions. are typically 
displayed in 1-4 seconds from the time an alarm is triggered in the facility. 
10 v...> Upon confirmation of: activity, the monitoring; authority can contact 

r : local law enforcement agencies that Aen direct ^ 

hyperl^nking to this; same building visualization f pf iaJairo conditions using, 
; >; ,: ^ i for ; : e*ample, r ^ center. 
, ; r;k; ; ^esponding^ yisu^4|5play of alarm 

15 : cqnjiitiQns^by 'linkjing T |o fhat^ac^^ 

^ o ; ^ : , 1? AH h\]ib .pr otQcql and ^ncap^ul^ted ^rpjy sex^^i^u^pafjop broadcast 

(e.g., active ^ 

: ; s: . on a MAP icon 12Q ?; ^mp^shoy/w^ dkectipxis to th^ facility, or any other 
20 , . V : ii ^ap^suc^ 

,. ; ;J In its^fire rnqnitpring role^ fhe system cmuse.^e saine, encapsulated 

- browser .communication protocols, to. spawn real-time updates of changes in 
fire alarm points that are displayed visually on a monitpring site 1 s web 
f j browser. Again, the visual display, can be. a building floor. 
25 with icons detailing all fire alarm point sensors. Pattern^nalysis can be 

used to discriminate a genuine alarm from a false.! one and to track the 
spread of a real fire. Like police, firefighters at the scene can access the 
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visual display of alarm conditions through a local wireless LAN hub 
utilizing conventional wireless communication protocols, such as protocols 
conforming with the IEEE 802. 1 1 protocol standard, and browser 
encapsulated cbrrmiunicatioh programs such as active X control, Java 

5 applets and so forth. 

Thus, electronic security and fire alarm protection can be provided 
which permits real emergencies to be distinguished, and which provides 
law enforcement and fire fighters with real-time on-the-scene information 
•"" ! for arrest-in-progress and/or effective fire fighting. Encapsulated browser 
10 coirmiunication programs are used so that reaUtime conditions of security 

and/or fire alarm points' in a remote protected facility can be displayed on a 
central supervisory monitoring station's web 5 browser and/or on remote , 
authorized browsers. 
n - u "-'[ : "^n-me-scene ^wireless cormectivity be used by responding 

15 poliee)frre response ^ 

• ;i<2 ' ;: fire monitoring] embedded' maps^acdessed'Vfe the MAPS icon 120 assist in 
getting response units quickiy to trie kcene. bnce on the scene, police 
officers or firefighters can access ! me visualrzation of alarm activity through 
20 - ' : a wireless interface of a VemoWWowser rMidinjg.on a laptop computer and 
! ' the'buildtag's security paWcontaiiung an embedded web' server. In 

accordance with exemplary embodiments', a unique communication protocol 
combines a conventional wifeless protocol, such as the 802.11 wireless 
protocol, with encapsulated browser communications. 
25 ' ! ' ' Exemplary embodiments can provide interactive reporting of facility 

secunty information between four basic subsystems over an 
' ' Internet/Ethernet communications link. "The four subsystems are: 
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(1) Security. P^nel 

This subsystem directly monitors the status of individual 
sensors and reports their, state to the requesting host, remote 
. „. .and mobile computer subsystems. Embedded web pages can 

5 be used to provide host, remote and mobile users detailed 

information on the site. _ - 

(2) , Host Computer . 

This subsystem, through an embedded web server interface, 
provides a real-time display of a regional map depicting the 

10 : . _ location of all the sites within a security 

status. Other remote subsystems used to remotely monitor 
the sites can gain access to the security pan^l at each site > 
through the host computer web page.^ ^ local browser 
interface provides the host computer operator access to the 

15 same detailed information. Browser-encapsulated 

■ communications prpgrams operating within the host maintain 
, real-time status of the sites/alarm points and continually 
update the display screen. 

(3) Remote Computer _ , 

20 , . This subsystem accesses ,toe embedded webserver within the 

host computer through, for example, an Internet browser 
program, which displays a map of the area sites and their 
current status. Using the mouse, a site can be selected to 
view the details of its status. Upon selection, the remote 

25 subsystem can be directly connected via a hyperlink to an 

embedded web server within the security panel. Similar to 
the host computer, the screen updates of site and point status 
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is. maintained through a browser-encapsulated 
communications program. 
. (4) Mobile Computer . . 

The mobile computer can gain connectivity to the ethernet 
. network local to the security panel through a wireless LAN, 
once it is within the operating range. "Broadcast packets" 
. . . (for example, encrypted packets which can be decrypted by 
. . - . . the mobile computer), can be sent by the security panel and 
boused to instruct the mobile computer how to directly 
• .:■ .. - . access the security panel's web. server through an Internet 

„ ,: browser program. Once connected to the, security panel web 
; v page; the, mobUe computer: interface can operate like the 
• t.i? w;- ,: - -remote computer. ^ b-ti;..--: . . ; 

■,4 r, : . :; ;' -.2:'j.ii sGe^r^'Cbtmaw^tions.^veKview^L' <bv« o^scm:.-.;; 

ur: ConimuniGati6ns!b'etweei«;£he various suhsystems ate represented in 

.!. : Figure ay'SMiktadAniwt^^ 
unique graphics and conmiuificatipn-progtar^tQieffect^ealrti^e 

's-r* •:;*C'i:::-i;;.peTfornianGe 'thrfoughrminimal^a;-lwidAviJi.rjiv.(^«. </• 

/* • r«.r;;. : vFigufe-^provides a-^eral/overview,of the 'communications' A« • 
2 0 rr transpire between the fouc basic subsystems;ithat is, (1> a libst computer 

m /I 202;-(2) a remote computer. 204; (^security panel(s) 206; and (4) mobile 
■ , - ' computer 208. ' Communications between the host computer 202 and the 

security panel(s) are represented as communications 210, with arrows 
( , . , indicating the'direction of information flow. For example, following a 
25 ■ powerup indication from the security panel, and a connection by the host's 

.- - local browser to the security panel's embedded web page, files regarding 
- : site information (such as floorplan) and alarm status information can be 



15 



BNSDOCID- <WO 0116912A1 \j> 



WO 01/16912 



PCT/US00/23974 



-15- 

sent to the host. Similar protocols can be followed with respect to 
communications between the remaining subsystems. Communications 
between the host computer 202 and the remote computer 204 are 
represented as communications: 212. . Direct communications between the 
remote computer 204 and. the security panel(s) 206 are represented as 
:■ communications 214. Finally,. direct communications between the security 

- panel' and the mobile* computer are. represented as communications 216. 

; - Those skilled in the art. will appreciate, that the information flow 
represented by the various communications paths illustrated in Figure 2 are 
/ : ' by way of example only , and that communications from any one or more of 

the four basic subsystems shown in: Figure 2 can be provided with respect" 
- : to any other one of the four, basic groups .shown, in any manner desired by 
the user. More detailed discussions <of -the* specific communication paths in 
accordance with the'^emplaryf;embodifl^ Figure 2 will be 

t i : r: described with j-espect m Figures Skl2; nHaweveir^f or a general 
f ^understanding^ 

* "provided Withtfespect to< pigiuie li u t:t » ijru :>:;>inqj.r;j uutjiui: 

As illustrated. ihLFigCTe-2 v unbst inte^ are 
i : r ■ , i . ^initiated by: executing ^conventional Internet -biaws^t? program (such as 
;r;?b Microsoft' s;InternetfExplorer,:^ an 

- exemplary embodiment that is represented in JFigu*e 2 ^$,an "Internet 

~ - Browser''. When' the ibrowser is directed to a specific site address (both 

* the host computer and the security panehare assigned Internet protocol (IP) 
addresses), the browser software attempts to connect to the. port at the IP 
address. The embedded web server at the addressed site recognizes the 
connect request at the port as a request to transfer the web page information 

1 (contained, for example, in a HTML file). Once transferred, the browser 
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, software begins to process the instructions within the HTML file. Within 
.the file are references to a graphics file to be displayed and a... 
communications program to be. executed. If these files are not locally 
available, ; the. browser software requests the transfer of the files from the 
host web server, using a hypertext -transfer protocol (HTTP). Once 
received (and locally saved), the browser software displays and executes 
the files, as directed by the HTML file. . . 

. , .. The graphics files displayed serve as the bitmap background that the 
site and point starus icons are written on. serving as visual status indicators 
to the monitoring operator. The communications program performs both 
lih^^^^v^o^b^t^ the subsystems and the, painting of 
. .. the status icons; When the C ommunications,reyeal a change in point or site 
^ status, ^e-^napQBS;are.r^ainte4. W^^^wmo™- These 
browser-encapsulated communication progr^Kenable ^eaBime 
performance over conventional communications! networks such as the 
; J c Internet- qrno:; lu:F. sri-v-j^t; 1 

•',3. - \r- ;. System Oy^ryiewi-i:,-^;' .if! .i-'^l -f; o\ ■'.,.--n ! : 
i , . . .figure 3idepicts,a : g^ 

[ J, 202, ^remote, computer 204 ri *e.mobilexomputer .208:,^.and,an optional 
,. ; . ;r wireless LAN hub 302.; The security panel is installed within the space 
(that is, the physical facility), being monitored- and is permanently 
connected to an Internet or Ethernet network 304. The wireless hub 302 
, - can be installed at the facility site to provide connectivity for the mobile 
; computer 208 via a wireless LAN 306., The host computer 202 can be 
.. installed any where so ; long as it is connected, to the same Internet or 
. Ethernet network 308 to which the security panel is attached. The remote 
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- computer 204 can be installed anywhere so long as it can access the same 
Internet or Ethernet network 310 to which the host computer and the 
security panel are attached (permanent, dial -ujp, ; arid so forth). : The mobile 
computer -208 must be within the coverage*area of the wireless LAN hub to 
5 access the security panel over the wireless LAN 306. " 1 

The security panel 206 monitors the status of security sensors 314 
installed within the monitored facility via data links 312. 1 When an enabled 
sensor changes state, a POINT STATUS message is sent to the host 
computer 202.-- The host computer, usually monitored by an operator, 
10 repaints the 1 icons^ shown on its display screen to reflect the updated 

condition of the security panel. ^ Any j mbbile 'comf)tit€;r 3 or remote computer 
. - :, \cur^ 

conditiori'dan-atsiP^epSint Aeocolis^dii^h^i^^Wft-dfeprtay after the next 
-status- qufery~re$f^^ -^oid 
15 ArAM • .-v ;^nH©st €6rtlpUt€^>- iiaioi;:rjVno-j ry/o ^ri^rviwrvr; 

Figure 4 details hardware and software components of an exemplary 
host computer 202. The CPU motherboard* 402 fo*> example, (e.g., based 
. • - -oh iritdpf 6c£&^ "any other processor) 

• * is> a ; convent^ 

20 !~ • *"• > ^ operatihg-syst^ 414,-'s^ but 

' : V 1 n6t liiiiited to the Microsoft ^N-T Operating, System^Oi An exemplary 

.i- motherboard will feMftte;'or acc<?rnmodSite, Ethernet communications port 
404 for interfacing with an Internet or Ethernet network. - A hard disk 406 
can be installed to support information storage. A keyboard and mouse 408 
25 can be attached for operator interface. 1 A display,' siich as an SVGA 

monitor can be attached via an analog or digital video graphics applications 
"* port 410 for a visual, display unit. The NT Operating System 414 can be 
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installed in a standard manner, along with the Internet Browser software 
package 416, such as Internet Explorer (any version, including version 5.0 
or greater) available frorn Microsoft Corp. An embedded web server 420 
is installed (such as the Microsoft personal web server or the GoAhead web 
server). A local cache directory '418 is installed with: web page support 
tools: supporting graphic files (i.e. regional maps), encapsulated 
communications programs, local data files and any other desired 
information. ' ' " • • 

b: Remote Computer' : : ~'7 ; •/' --' - w 

Figure 5 details hardware and software components of the remote 
: computer 204, The GPU motherboard 502 (e.g:, based on Intel processor, 
■ -such : as 80486,-Peiitium MI/IHVor any other processor) isa conventional 
personal -eohiputer^ system 

■jo : . r Mi ^ o ^ o ft)NT©peratirig-Sy^m^0:^ wilt feature, or 

accommodate EtJierri& ! c&Ttoftrf^ 

network via Ethernet port 506.!''A'hard^iyk J 508 will support information 
:.r : storage:" (Abbott* aritf mo , tfSfe*'Sia-^itf^r»Viae' operator interface. An 
'-:■:;:{ M--SVGA monitor cari bV attached fa'a* pofi 5l2-fdr a visual display unit. The 
; • - operating system'504 is installted in ^standard maimer; a'/cng with an 

Internet Browser software package; such as '^Internet Explorer." package 
514: A local cache directory -5 16 is installed with web'page support tools: 
supporting graphic-files (for example, individual room layouts! floorplans, 
■> side view of multi-story facility ; and so ^fbrth), local data files; encapsulated 
; ' communications programs/ and local data files. ': . 

c. Security Panel "'■ 
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Figure 6 details hardware and software components of the Security 
Panel 207. The CPU motherboard 602 (e.g T , based on Intel processor, such 
as 80486^ Pentium I/II/III; or any other processor) is a conventional 
personal computer that will, support the desired network operating system 
604 such as any 32-bit operating system including, but not limited to the 
Microsoft- NT Operating System 20. The motherboard will feature, or 
accommodate Ethernet communications with an Internet or Ethernet 
network via Ethernet port 606. A hard disk 608 will support information 
storage. The operating system can be installed in a standard manner. A 
Windows compatible embedded web s t erver 610-isijistalled (such as those 
Available, from Go Ahead software),: A main application program 612 is 3 
alsoJnstalled, including local <data\fi^ such V 

> . ^:as RS485- communications 
v? u. ■ jCOiiiffiuniGatio.n.s;jwith Jhe, sensory 

f . devices . I/As suppqrfcinginputs^yj^^^ 616, and, direct digital ~- 

rH I/Q'boardis^iSiCanrb^add^djt^ r; 
.:^:vvr\r\i ;;oo-;d. friv/ ;MQl?il^f.CpiHputer <*<y- nor jon i:*tij3 j .fro-'Wi: 

> ..; T* ; • Figure- f7: details - the thardwaiie- and- softly are, pompon of the 
Mobile compter 208? The, CPU^i^plherboard;?©?.^^.^ based,;on Intel 
• :% :! ; ; ,8Q4-86^ Pentium I/II/III^ or apyypther prpcessor)v^ : a conventional laptop 

j computer that will support the^esired : network : operating system 704, such 
: ~, -as ajiy 3 2-bit operating^ system including, but not limited.to the Microsoft 
- NT Operating ;Sy stem 20,. -Add-on boards can be installed to interoperate 
: with,- for example,! IEEE 802.11 Ethernet communications 706, compatible 
with the installed wireless hub 302 (shown in figure 3). A hard disk 708 is 
installed to support information storage. An integral keyboard and mouse 
710 are attached for operator interface. A display, such as an SVGA LCD 
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monitor 712 is attached for a 'visual display unit: The operating system can 
be installed in a standard manner, along with any Internet browser software 
package 1 14 , such' as Internet Explorer (for example, version 5 .0 or 
greater): A local ciche directory 716 is installed with web page support 
5 tools: supporting graphic files (i.e. individual room layouts, floorplans, 

' side view of multi-story facility, and so fdrth), local data files/encapsulated 
communications programs, and local data files. 
' e. Screen Display 

Figure 8 details screen display graphic components: These 
10 " : 3 ; components are common to the screens available to the host" computer, 

remote computer and mobile computed users! These display Components 
are made aVailafele : ir6ugh^f6f example, 4 the use of staiidard browser 
technology/ ehcapsulatedgfapW 

programs. When the browser software initializes; it gerieraies the window 
!5 frame 802 on the display 800. Wfeen'&e^fow an embedded 

web page within the 'iiost computer 
' ''" * ' 7i;t ^/ Vransferreil. 1 WitHm &e HT^L ftl^ i^ W reference to* an encapsulated 
7 : ; ? ' graphic image fiie 804 to be ; dis^ayed; - This file fepfesehts,1fbr example, 
i: '"'^''"i^l reg ional * ^iap "* the H f ac it i ty~ fioorp i aifj * or an 1 in(i i v idual tooxri lay out . Also 
20 referenced in the HTKlL file is the execution of an encapsulated 

" communications program 80>6. This communications program is spawned 
1 and operates in tandem with the browser software , maintaining real-time 
communications with tfie site 

The communications software queries and monitors the condition of 
25 " the panel/point status of the remote sites. Upon initialization, and as new 

status is received, the communications program "paints" new icons 806 
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atop the graphics display, the icons representing the location and status of 
the depicted site/point. . t . . . , . , ... .... ... ; 

.In an^exemplary embodiment v there are six states represented by the 
. . icons; (1) ALARM. (point/site in alarnr but not ^acknowledged), (2) 
5 ACKNOWLEDGED (ACK'D) ALARM (point/site in alarm and 

acknowledged by security monitor), (3) RECENT ALARM (point/site 
recently in alarm), (4) NORMAL (point/site not in alarm), (5) DISABLED 
(point/site disabled) and (6) FAIL (point/site not .responding) . These 
different states allow the monitoring user to determine the current and 
10 . .. recent location of an intrusion, provide the visualization of multiple points 

of intrusion, and the .ability to visually discriminate .between legitimate and 
falsely-triggered^alarms, . r All communications ampng the networked . .. 

• components are transferred using, standardized data packets of any known 

-. ::ir.-";>;^:':.;^rt r 'ir; wis* :::oz -v:sn o?!k::; iriroai; . -/'ic, -\;*; r i +.xi 

15 " L-:^:;,:^>: ^ ^^^^^^^ ^ v,:^h ,r; r, : ^ ' » 

, -a. Security Panel-Host Communications 

Figure 9 details the communications between the security panel 206 

. . A . ? and the.host compute^ 202 . 0 ,Upon the application of power ^ the security 

panel sends a PawerUp^ Message 902 to its designated host computer IP 

20 address. On regular intervals, the. host computer .sends a HEALTH 

STATUS REQUEST 904 datagram to each security panel. A repeated 

failure to receive a response packet 906 indicates to the host computer that 

the panel t communications link has failed and its icon is updated . When 

.received by the host computer, this message is logged into a local data file. 

25 ...... When initially engaging communications with the security panel, the host 

computer sends a POINT STATUS REQUEST 908 to the security panel. 

Until an initial status has been determined, all icons are represented with an 
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UNKNOWN icon (such as a circle with "?"). If the request repeatedly 
goes unanswered, the site is determined to be inoperative and is represented 
with a FAIL icon. : ; 

. y The successful receipt of the POINT STATUS response packet 910 
5 causes the host computer to repaint. the screen icons; to represent their 

current determined condition. When an enabledrpoint status has changed, 
. the security panel sends a POINT STATUS message 912 to its designated 
host computer: IP address: Upon its receipt, the host computer repaints the 
icons to represent the current status. ; . : 

10 When a monitoring operator at the host computer wants to 

v . acknowledge an annunciated alarm condition, an ALARM A OK packet 50 
■r : . is sentito the; security panel, along .with* a reference to thealarm being 

acknowledged . :i When^eceived by the; security .panel ,= the condition of the 
_ * point is -updated ^and^new POINT] STATUSi m^ssager916 is sent back to 
15 Tfr : ^ . the host computer ^ "Again,; the receipt: of: this [packet .causes [the host 
t : , computer to^repaint^^ 
. . ; : wants to disable a point; grbupxrf points; or an entire site;, an ALARM 

r> r-r-- -* r DISABLE message ;9i 8 is sent ;(containing a mask, reference^ for the point 
* ■:>: n . ' ■ array). "When* received by:;the security panel; the; point condition(s) is(are) 
20 . ,: r 1 ■ - modified and a new POINT STATUS^iriessage .920 iS' s en t^ in response. Its 

: ; ! receipt by the host computer repaintsthe icons^on the screen display. 
;v., . b. Remote Gomputer-Host-Gomputer Communications 

Figure 10 details communications between the remote computer 204 
i and the host, computer 202. When the remote computer user wishes to 
25 attach to the security system, it executes a compatible browser software 

package and connects to the Internet or Ethernet network (e.g., Internet 
Service Provider (ISP) dial-up, local hardwire, and so forth). When 
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^ actively connected, the user directs the browser to the IP address of the 
r host computer /seeking to connect to the host computer's web server 1002. 

When accessed, the embedded web server software downloads the 
. . HTML file 1004 that defines the host and/or security panel web page(s). 
5 The HTML file includes the reference of ar graphics file. If the current 

version of the file does not locally exist, the remote computer, browser 
makes a request: 1006-for the HTTP: transfer of the graphics file from the 
host computer. Once received from the host computer in transfer 1008, the 
graphics file is locally stored (in cache directory) and is displayed on the 
10 browser screen. The HTML file then instructs the execution of a 

v communications program. Again, if the current version of the file does not - ^ 

. : : locally exist; the remote^ computer browser frequestsi the HTTP transfer of i 
i:; ^ i ; i. 

15 ; t communications^^ - ^ 

r: ;i. xi '.• stepr!0:14j ; This pro.gram.:runsiia -taixlemfwitfedtiteT existing .browser ;£ *, '■ z-9 

; ;LA.; s^^ Once 
^ started,: the: coni^ 

>r ^requesting tlje: statasi of the various panel sites viarfeijuests 1016. When the 
20 ■ • ': comnmnicatiohs. program^ 6cd\fes th'tf Response status messages 1018, all 

- ■ ; - the icons overlaying the graphics screen* are repainted to indicate the 
/.<vv current status of the sitesr. Whea t-he > remote. computer user selects the icon 
; ;of a site for more detail, the browser software can immediately hyperlink to 
the IP address of the selected security panel , (connecting to the embedded 
25 * web server within the panel in step 1020), and perform communications 

■ with the panel in a manner similar to that described with respect to the host 
. v computer and Figure 9. ' 1 i 
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c. • Remote-Security Panel Communications . . 
Figure 1 1 details the communications between the remote computer 
204 and the security panel 206. The remote computer gains access to the 
5 security panel through the host computer via a hyperlink connection. When 

selected, the browser is directed to the IP. address of the security panel, 
seeking to connect to the security panel 1 , s embedded web page 1102.. 
When' accessed, the embedded web server software downloads the HTML 
file 1 104 that defines the security .panel 1 s web page. The HTML file 
10 includes the reference of a graphics file. If the current version of the file 

~ does nor locally exist, the remote computer browser requests the HTTP 
^"'-transferor 

^*om the security ipariel^in respd 
Ciri tache'^ The HTML 

15 — r fiie thd^^^ if 

v * - • -the ckrrentf Vfcfrfeion of the fife: does not 1 locally exist 1 ; the remote computer 
^bidvl^^ 

security-'p'ane^ 

the communications program file is ^loe&lly -stored and immediately executed 
20 at M 14, This program runs in tand^; with the existing ^browser software 

" knd does not prevent or hinder any normal browser'activity/- - 

~ Once started, the communications program begins a continuous 
1 - polling sequence, requesting the status of the various points via a status 
request 1 1 16; ■ When the communications program receives the response 
25 status messages 1118, all the icons overlaying the graphics screen^ are 

^ repainted to indicate the current status of the points. 



WO 01/16912 



r CT/US00/23974 



- • -25- 

d. Mobile-Security Panel Communications 
Figure 12 details communications between the mobilexomputer 208 
and the security panel 207. The mobile computer. 208 gains access to the 
- security panel through a wireless local area network, .enabled by ;the 
5 - wireless LAN hub 302 and/or any available Wireless network including, but 

not limited to existing cellular, telephone networks. The mobile; computer 
\ browser software is executed, referencing a locally held web page 1202. 
. The HTML file references. both a graphics display filell204 and an < 

encapsulated communications program 1206 (which is already installed in 
10 ; the mobile computer). After the screen .is, painted with the graphics image, 

; the communications program -is; executed at 1208 - This iprogram continues ^ 
to search via the -wireless interface ;cardifor .aibrd^c^st packet containing ^ 
, _ . ,an address, stfch^s^n;fncrypte(J JEaddf ess,: ofethe lqeal seeurjty panel. 

15 Vmobile c<^puter cori^u^ 

v ..the -brawsef Js direct^ security % 

;f : panel . ? rExecution aftCTithifcfRJmt is identical to th^ renaotfesieciimy ( panel 
r comrauiiic^io^^ 
.... ... regarding the; connection' activities^ •;Tn*»;: , !:;:c rw ■h^'uiiiu::?' -jf;' 

20 : * \ ' : ,?It will -be appreciated by rthpser skilled in the art? thait; the; present 

invention can be embodied another, specific forms- without departing from 
: the spirit or .essential characteristics thereof,, The presently disclosed 
: embodiments are therefore considered in all respects ta fce. jillustrative and 
not restricted. The scope of the invention is indicated by >the appended 
25 claims rather than the foregoing description aijd all, changes thatxome 

within the meaning and range and equivalence thereof are intended to be 
embraced therein. 
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What Is Claimed Is: 

1. Apparatus for monitoring a space, comprising: 

a security panel located at the space, said security panel having a 
plurality of sensors; and 

a monitoring system for receiving real time information regarding 
the space from the security panel over a network using a network protocol, 
said monitoring system including a graphic interface to display said 
information as multistate outputs associated with each of said plurality of 
sensors. 

2. ' Apparatus according to claini 1,' wherein the network is an 
Ethernet network: ^ ^ 



- 1 1 " : ' : * ' J 1 J ' ; ' ; " f 3 . ' ' 1 : V(£par^ to ciaitft 1/ 'wherein the monitoring 

15 system includes enca^siilsitbd Ctthinim^ programs ' 

1 v " ^ •• " ;r5 v' M ;'^ r ' : «-^^pp^. a ^^ acci^ifdihg'td cikini : x^whereiri said information is 
received using "k'stanaafd'Ihterriet broVser: 1 ' " " v " u% 

20 5 . Apparatus according to claim 1 , wherein said information is 

displayed using a bitmap representation of said spacer with icons overlaid 
on said bitmap to identify said sensors and their status; * 

6. Apparatus according to claim 1, wherein said information is 
25 displayed using an icon on a display to represent a condition of each 

sensor. 
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7. Apparatus according to claim 6, wherein said condition can 
be any of said multistate outputs, at least a first of said multistate outputs 

... being an indication that a sensor is.ip.an alarm condition, a second of said 
multistate outputs being an indication that said sensor was recently in an 
alarm condition, and a third of said pultistaje outputs b^ing an indication 
. that said sensor is not in an alarm Qondiuon. 

8. , Apparatus. in accordance with. claim 7, wherein said 
condition can further be an indication that said sensor has been disabled. 

. ( ,9. . Apparatus in accordance with claim 7, wherein said ^ 
condition can further be an indication that said, sensor has been failed. 

10 Apparatus in accordance, with claim 1, wherein monitoring 
15 of said d^pla^xan ; di^in^ 

T - -. ) t , U y-H APPV^Ws according j:p claim 1 % whereinjnonitoring of said 
display can be used ta.tjack.s^giie^tial actiyajion of .said sensors, yet 
provide information regarding the most recent sensor placed into an alarm 

20 . , ; ^^Wv.; i / i :-nab r> -:iV.:;vji-" ~>u \ 7 \:j /. * 

12, . ..... Apparatus according ^to claim 1, comprising: , 

a remote monitoring system which can access said information. 

25 13. . Appa^tus according to claim 1, comprising: _ 

a mobile computer which can access said information. , 
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"'*'."* 14. Apparatus according to claim 1 , wherein said information 
can be displayed as a hierarchy of display screens, with at least one level of 
said hierarchy of screen displays showing multiple facilities being 
monitored, and With at teast one additional level of said hierarchy providing 
access to floor plans for any of said facilities. 

~ 15. Apparatus according to claim 13, wherein said mobile 
computer includes : 

means for accessing information contained within said' security panel 
via use of an encrypted address message broadcast by at least one of said 
mobile computer and said security panel. 

16. Apparatus according to claim 15, wherein said mobile 
computer accesses said information via a wireless network. 

tiir/L * y * Ut i7V u ' " "Apparatus according'tb claim 16 J , f 'Wfief6ih said wireless 
: 1 l: * 1 network midludes a' cellular ^eiephotie 'network': 

; ' 18. J ° Ap^ 

a security panel ^iocatecf at ttie spaceVand" 
a supervisory monitoring system for receiving real time 
information regarding "the space from the security panel monitoring system 
over a network, said monitoring system including a graphic interface to 
* display information that distinguishes false alarms from actual alarms. 



19. Apparatus according to claim 18, wherein the network is an 
Ethernet network. 
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20. Apparatus according to claim 18, wherein the monitoring 
system includes encapsulated communications program 

. 21. Apparatus according to claim 18, wherein said information is 
received using a standard Internet browser. 

22.. .Apparatus according to claim 18, wherein said information is 
displayed using a bitmap representation of said space^ with icons overlaid 
on said bitmap to identify said sensors and their status. 

23 . Apparatus according to claim 1 8 , wherein said information is 
displayed using an icon on a display to represent a condition of each 
sensor. . - , , ... , _ . . . 

15 24. Apparatus according to claim 23, wherein said condition can 

_^ t ^ be -any one o^multo^ a first qf said^multistate outputs 

being an indication that a sensor is in an alarm condition, a second of said 
multistate outputs being an indication that said sensor was recently in an 
alarm condition, and a third of said multistate outputs being an indication 

20 that said, sensor is not in an alarm condition. 

25. Apparatus according to claim 18, wherein monitoring of said 
display can be used to track sequential activation of said sensors, yet 
provide information regarding the most recent sensor placed into an alarm 
25 condition. 
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26. ' Apparatus according to claim 18, wherein said information 
can be displayed as a hierarchy of display screens, with at least one level of 
said hierarchy of screen displays showing multiple facilities being 
monitored, arid with at least one additional level of said hierarchy providing 

5 access to floor plans for any of said facilities. k 

27. . Apparatus according to claim 18, wherein said supervisory 
monitoring system is a mobile computer which includes:. 

> means for accessing information contained within said security panel 
10 via use of an encrypted address message broadcast by at least one of said 

r - - ; "mobile computer and said-security panel'. 

*' . b :v^-< : . .28';- ^'Klethod'-for -monitoring'. steps: 
r . /; x \ : , ~ . i 0 e£lly ! iMnfo^ sensors located at the 

transmitting information associated with a status cftsaid sensors, in 
real time, over a network using a network protocol, to a supervisory 

^ ]: associated%ith each of said plurality of seniors. - . ' : 
20 ; ^ — . : r i w . , ■: - , . 

v~ : . - ' : * 29 . Method according to claim 28 , wherein said information is 

transmitted using encapsulated communications programs ari£ a standard 
Internet browser. 

25 30. Method according to claim 28, wherein said information 

transmitted to said supervisory monitoring system is displayed at the 
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supervisory monitoring system using a bitmap representation of said space, 
with icons overlaid on said bitmap to identify said sensors and their status. 

31. Method according to claim 30, wherein a status of each of 
said sensors is constituted by any one of multistate outputs, at least a first 
of said multistate outputs being an indication that a sensor is in an alarm 
condition, a second of said multistate outputs being an indication that said 
sensor was recently in an alarm condition, and a third of said multistate 
outputs being an indication that said sensor is not, in an alarm condition. 



32. Method according -to. claim 28, wherein said information can 
be displayed at said supervisory monitoring system as a hierarchy of 
ry>. displaycscreens, with ataea$t phejeyel of ,said hierarchy of screen displays 

/ r -.showing muW 
15 level of said hierarchy providing access to floor plans for aiiy. of said 

•j: ,>:<■ ^facilities.; ; ; •; d~r" hav.iri?;*'-; 1 . iiOirfi!""ro*r:i ^vii]tr[-::c\> . ' 
\r^-i.'TK,M ~ v .i^^ 'ito j it-v:-- : &nl . .vs :p t r:r/c „*kt.;: :..Vi 

" "i 33j/yi r i Method^ccqr&ijg T tQ clajpv 28 ?r jy£er?in. said^ supervisory 
monitoring system/is a m 
20 contained within a security panel at said space via use of an encrypted 

: r . : , address message broadcast by at least, one of said mobile computer and said 
. security panel. -;• \: v-.. ^j' !:. v :n\-: :.■ • 
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